and more in a single search tool across platforms. Read the announcement here. |
In the 2022 version, we see that when we import a user with certain special characters those characters are not changed. Then if you update any attribute on the user, it seems to fire off a replace of special characters with the replace_mapping data...
Hi Team,We are using below CREATEACCOUNTJSON in our WINPS connector but we are getting erro while doing provisioning.{"CREATEACC":["script=\$pw = convertto-securestring '${PSSCRIPT_PASSWORD}' -asplaintext -force;\$mycred = new-object -typename System...
Hi,I am working on the ADSI account creation json. I am trying to set the attribute 'displayname'. The logic behind it is, if the user has middlename then the displayname should be lastname, firstname, middlename. If the user does not have a middlena...
Hi,For new joiner Active Directory creation based on one of customproperty subject of the mail should be changed. Can anyone help how this can be achieved I tried adding Subject:${if(user?.customproperty30='xxx'){'yyy New Joiner Details'} else{'zzz N...
We are trying to hit {{url}}/ECM/{{path}}/testConnection API endpoint but get a 403 error. The SAV role user is having have access to SUBMENU.WEBSERVICE.api_v5_testConnection and SUBMENU.WEBSERVICE.api_testConnection. Is there any other permission re...
Hi,We are trying to perform incremental import from authoritative source (SQL database) and have two queries related to the same:1. We need to know the format of the "updatedate" column in the DB table/view. In the documentation portal it is mentione...
Hi, We have a requirement related to sending emails to entitlement owners for reminder or approval. We want approval to be sent to specific rank owners but email to all. So, our design is to send the owner's approval to only the entitlement owners th...
Hello,we are trying to import the account from SAP IDM using LDAP connector. the connection is successful but when we ran a account import job we are facing a below issue, avax.naming.directory.InvalidSearchFilterException: Missing 'equals'; remaini...
Are the tokens issued by Saviynt (refresh_token) when calling {{url}}/ECM/api/login service is digitally signed?
Hi,we are populating admin emails of diferent countries to customproperty through dataset, that needs to be put in TO field. So I want to know if To field has 1024 characters only restrictions? If so how can I include this logic. Can anyone help?Than...
Can someone let us know if Saviynt is hosted in the middle east region and if yes then which country is it?
Hello We are revoking any entitlement not used over 90 days even if it's in-role entitlement. But, we want to implement auto-approve when it's requested entitlement via ARS. Here is what I am thinkingev.customproperty will have list of role name that...
Hi All,I need help in mapping nested & multivalued attribute in ImportUserJson's colsToPropsMapThis is the query which I have taken from SAP SuccessFactor Connector Guide - https://saviynt.freshdesk.com/support/solutions/articles/43000478793-sap-succ...
Team,We are using Parallel workflow for our service account use case and we are trying to get the details of user who rejected the request. And we have assigned email template in Rejected Access block. As per documentation: https://docs.saviyntcloud....
Hi TeamFor one application (Docusign) I completed the all the test cases but only one last piece is pendingWe had two methods to create the token 1 is jwt and another one is oauth methodJwt token method will expire in 1 hour and oauth token method ex...
Hi,After the recent saviynt version upgrade from 5.5SP3.9 to 5.5SP3.13, we are getting 403 forbidden error while calling few native Rest APIs.We tried searching if these webservices access are already assigned or available for assignment but couldn't...
Hi TeamWe have a requirement from client where they want to display more information related to requestable entitlements in Access request form apart from just Entitlement value, Relevance and description. Can we add a new column for a separate attri...
Dear All, How we can get user firstname, user last name, manager firstname,manager lastname.I tried to create this query but not getting any data however data exist in database. select u1.firstname,u1.lastname,u1.username,u2.firstname,u2.lastname,u2....
We have to write some identity attributes that are generated on EIC side back to the source system SAP HCM.I see there is no UPDATEUSERJSON in the SAP connector like e.g. in the REST connector. Can anyone advise with a best practice how to achieve th...
Hi Team,There is a requirement to send email notification to the helpdesk while the new user is onboarded.The condition used here is that the employee type should be Tier 3. If there are other types the email should not be triggered. Before this requ...
Hi,We have a custom JAR deployed to fetch runtime analytics and to send that report through API we are sending it as email body. So external JAR job says successful but it is throwing error like Error sending data to APM server, APM Server transport ...
Hi, We recently changed to OAuth for the Incoming Mail ARS job (Actionable email job). We are not seeing any response in the Job log and the email-based approval is not working. When an approver approves through mail, that email is being received in ...
Does anyone know of anyway to utilize certification campaigns to certify structural authorization in SAP? As far as I can tell there isn't a way to determine structural auth in Saviynt but hoping someone has run into this before.
Hi,I am working on REST Connector and I have specials character in my credential."client_secret":"{X7+)PYU~\4Q" Due to brackets in between ("{" & ")"), getting the syntax error while saving the connection.Could you pls suggest on how do we use this c...
Hi Experts,Please helpWe are creating Third Party users through create user form. Once the user is creating I want requestor to be user's manager/owner. I have created a dynamic attribute with name "manager" and mapped it to "owner" field of "Users....
Hi,Is there any other way to check the system username generation code that we have written, instead of creating a user everytime?We have a lot of use cases in our system username generation code, and to test all of it, we may have to create a lot of...
Hello,Is it possible to lock certain attributes for a user, for example firstname or lastname, from being updated by an HR identity feed on a user by user basis? Currentl HR feed is done by a csv dump upload via a job, but this would be a full import...
Hi Team , I have a connector where account attributes are provided , i need to put some conditions to the same Is it possible ?[ACCOUNTID::krbPrincipalName#String,CUSTOMPROPERTY10:: if (nsaccountlock = null then true else false)#String,RECONCILATION_...
Hi,We are trying to integrate Saviynt with Splunk and looking for queries for the following scenariosNo of Jobs failed in a day - This could be aggregation jobs or provisioning errorsNo of HR Events in a day - This is to identify how many joiners/ter...
Hello,This is for LDAP connection.Is it possible to configure ACCOUNT_ATTRIBUTE to put the value in account custom property if the attribute in the source is null/empty.Something like this:[ACCOUNTID::uid#String,CUSTOMPROPERTY10:: if (property is nul...
Hello,I'm trying to do a use case where I need to generate a randompassword for non employee users and a password based formula for employee users in the CreateAccountJSON for Active Directory.Below is the line of code I have. ${if(user?.username.sta...
We are getting the below error trying to send a test email with the OAuth email configuration. The Saviynt logs show a status codes of 200 and 404. Logs are attached. I am assuming this means we've not configured the Azure side correctly however, I ...
Hi Team,After entering the update user form, The manager is seeing the below column while selecting the end user to update.(NAME,FIRSTNAME,LASTNAME,EMAIL,CITY,MANAGER,STATUS) Please help me to know, how I can add/make visible an extra column "End dat...
I'm importing users from Azure AD with REST connector. All users in Azure AD have their manager assigned.On the import of users with REST connector, url https://graph.microsoft.com/v1.0/users?$select=attributes.... returns all attributes selected, bu...
Hello,Does anyone know what is the policy in Saviynt for user logins? I have noticed they are stored in the userlogins table but will this table just fill up forever? Do older entries get deleted automatically and, if not, is there a way to have this...
I am looking for information around Identity M&M solution. Is there a way we can extract the list of duplicate users which are identified by M&M configuration and are present under the Analytics > M&M list. Or, if Saviynt supports sending the duplica...
Hello,We have an application which has entitlements and these entitlements have privileges defined. Each user when granted an entitlement has different set of privileges. As part of the user manager certification process, we want the reviewer to revi...
Hi All,We have received a new requirement from client to include ability to request for users with the same manager by updating the End user SAV role.When I check for the options I could find the below option to add query.Kindly let me know if this i...
Hi, We would like to seek your help regarding SoD where we have created the SoD risk that got function that contains of > sign in the name of the entitlements. The SoD violations cannot detect it during the ARS form. But, there are some function tha...
Hi We have a requirement to import only AAD groups in Saviynt Azure AD connector.There is a sync between AD and Azure AD in our environment. Azure AD has both AD groups and AAD group. How to import only AAD groups in Azure AD connector.Can we use ENT...
I have a GSP page and want to create a dropdown field. the values in this dropdown needs to come from a dataset. Can you let me know if we have a way to do this.
Hi Experts,Please help.Is there a way to add search criteria/filter in "Add Account" (Create AD Group --> Add Account).Currently the search is only on "Name", "Security System", "Endpoint" and "User's username" RegardsNaveen
Hi Experts,Please could you advise which gsp I can modify to remove attachment section in "Entitlement Request approval" page?RegardsNaveen
Hi Experts,We have requirement of making comments mandatory if an approver rejects an item in request.It works fine if approver rejects individual item, but systems doesn't ask for comments if "Reject All" is used in the request.Am we missing any "Gl...
Hellowe found that as soon as user added into role, all entitlement will get assigned. Instead of this, can we do like the way below?1) Just role to be added to user without any add access task. It will be same when additional entitlement is added in...
Can we use Sharepoint or S3 Bucket to consume file over SFTP connector? https://saviynt.freshdesk.com/support/solutions/articles/43000673106-sftp-connector-guidePlease let me know what's spec requirement for SFTP
Hello,I have a question if the host firewall on the SC2.0 client box needs to be disabled. Per our security policy we cannot have the host firewall disabled. In view of this what are the alternatives available to get past this issue.Thank you.Regards...
Hello,Does anyone have a sample query for populating the value entered in an attribute to another attribute in a user request form? For example, in attribute A the number 50 was selected and I want to populate attribute B with the value of attribute ...
HI, We have a requirement to create a new SAV Role which will be used in custom jar to call different webservice APIs. We created a new role and in access request provided almost all WEBSERVICES available. On checking it seems all the APIs are workin...
Under "request access for multiple users" tile only applications are listed, is there a way to make a Enterprise Roles also available for such requests?Is there any other way to request Enterprise Roles for multiple users?
